...
This noncompliant code example accepts a tained filename argument. An adversary could may supply the name of a sensitive password file, complete with the path and consequently force operations to be performed on the wrong file.
...
Page History
Overview
Content Tools